4915205678
* core: start migrating to flows for authorisation * sources/oauth: start type-hinting * core: create default user * core: only show user delete button if an unenrollment flow exists * flows: Correctly check initial policies on flow with context * policies: add more verbosity to engine * sources/oauth: migrate to flows * sources/oauth: fix typing errors * flows: add more tests * sources/oauth: start implementing unittests * sources/ldap: add option to disable user sync, move connection init to model * sources/ldap: re-add default PropertyMappings * providers/saml: re-add default PropertyMappings * admin: fix missing stage count * stages/identification: fix sources not being shown * crypto: fix being unable to save with private key * crypto: re-add default self-signed keypair * policies: rewrite cache_key to prevent wrong cache * sources/saml: migrate to flows for auth and enrollment * stages/consent: add new stage * admin: fix PropertyMapping widget not rendering properly * core: provider.authorization_flow is mandatory * flows: add support for "autosubmit" attribute on form * flows: add InMemoryStage for dynamic stages * flows: optionally allow empty flows from FlowPlanner * providers/saml: update to authorization_flow * sources/*: fix flow executor URL * flows: fix pylint error * flows: wrap responses in JSON object to easily handle redirects * flow: dont cache plan's context * providers/oauth: rewrite OAuth2 Provider to use flows * providers/*: update docstrings of models * core: fix forms not passing help_text through safe * flows: fix HttpResponses not being converted to JSON * providers/oidc: rewrite to use flows * flows: fix linting
133 lines
4.6 KiB
Python
133 lines
4.6 KiB
Python
"""passbook oauth_client forms"""
|
|
|
|
from django import forms
|
|
|
|
from passbook.admin.forms.source import SOURCE_FORM_FIELDS
|
|
from passbook.flows.models import Flow, FlowDesignation
|
|
from passbook.sources.oauth.models import OAuthSource
|
|
from passbook.sources.oauth.types.manager import MANAGER
|
|
|
|
|
|
class OAuthSourceForm(forms.ModelForm):
|
|
"""OAuthSource Form"""
|
|
|
|
authentication_flow = forms.ModelChoiceField(
|
|
queryset=Flow.objects.filter(designation=FlowDesignation.AUTHENTICATION)
|
|
)
|
|
enrollment_flow = forms.ModelChoiceField(
|
|
queryset=Flow.objects.filter(designation=FlowDesignation.ENROLLMENT)
|
|
)
|
|
|
|
def __init__(self, *args, **kwargs):
|
|
super().__init__(*args, **kwargs)
|
|
if hasattr(self.Meta, "overrides"):
|
|
for overide_field, overide_value in getattr(self.Meta, "overrides").items():
|
|
self.fields[overide_field].initial = overide_value
|
|
self.fields[overide_field].widget.attrs["readonly"] = "readonly"
|
|
|
|
class Meta:
|
|
|
|
model = OAuthSource
|
|
fields = SOURCE_FORM_FIELDS + [
|
|
"provider_type",
|
|
"request_token_url",
|
|
"authorization_url",
|
|
"access_token_url",
|
|
"profile_url",
|
|
"consumer_key",
|
|
"consumer_secret",
|
|
]
|
|
widgets = {
|
|
"name": forms.TextInput(),
|
|
"consumer_key": forms.TextInput(),
|
|
"consumer_secret": forms.TextInput(),
|
|
"provider_type": forms.Select(choices=MANAGER.get_name_tuple()),
|
|
}
|
|
|
|
|
|
class GitHubOAuthSourceForm(OAuthSourceForm):
|
|
"""OAuth Source form with pre-determined URL for GitHub"""
|
|
|
|
class Meta(OAuthSourceForm.Meta):
|
|
|
|
overrides = {
|
|
"provider_type": "github",
|
|
"request_token_url": "",
|
|
"authorization_url": "https://github.com/login/oauth/authorize",
|
|
"access_token_url": "https://github.com/login/oauth/access_token",
|
|
"profile_url": "https://api.github.com/user",
|
|
}
|
|
|
|
|
|
class TwitterOAuthSourceForm(OAuthSourceForm):
|
|
"""OAuth Source form with pre-determined URL for Twitter"""
|
|
|
|
class Meta(OAuthSourceForm.Meta):
|
|
|
|
overrides = {
|
|
"provider_type": "twitter",
|
|
"request_token_url": "https://api.twitter.com/oauth/request_token",
|
|
"authorization_url": "https://api.twitter.com/oauth/authenticate",
|
|
"access_token_url": "https://api.twitter.com/oauth/access_token",
|
|
"profile_url": (
|
|
"https://api.twitter.com/1.1/account/"
|
|
"verify_credentials.json?include_email=true"
|
|
),
|
|
}
|
|
|
|
|
|
class FacebookOAuthSourceForm(OAuthSourceForm):
|
|
"""OAuth Source form with pre-determined URL for Facebook"""
|
|
|
|
class Meta(OAuthSourceForm.Meta):
|
|
|
|
overrides = {
|
|
"provider_type": "facebook",
|
|
"request_token_url": "",
|
|
"authorization_url": "https://www.facebook.com/v2.8/dialog/oauth",
|
|
"access_token_url": "https://graph.facebook.com/v2.8/oauth/access_token",
|
|
"profile_url": "https://graph.facebook.com/v2.8/me?fields=name,email,short_name",
|
|
}
|
|
|
|
|
|
class DiscordOAuthSourceForm(OAuthSourceForm):
|
|
"""OAuth Source form with pre-determined URL for Discord"""
|
|
|
|
class Meta(OAuthSourceForm.Meta):
|
|
|
|
overrides = {
|
|
"provider_type": "discord",
|
|
"request_token_url": "",
|
|
"authorization_url": "https://discordapp.com/api/oauth2/authorize",
|
|
"access_token_url": "https://discordapp.com/api/oauth2/token",
|
|
"profile_url": "https://discordapp.com/api/users/@me",
|
|
}
|
|
|
|
|
|
class GoogleOAuthSourceForm(OAuthSourceForm):
|
|
"""OAuth Source form with pre-determined URL for Google"""
|
|
|
|
class Meta(OAuthSourceForm.Meta):
|
|
|
|
overrides = {
|
|
"provider_type": "google",
|
|
"request_token_url": "",
|
|
"authorization_url": "https://accounts.google.com/o/oauth2/auth",
|
|
"access_token_url": "https://accounts.google.com/o/oauth2/token",
|
|
"profile_url": "https://www.googleapis.com/oauth2/v1/userinfo",
|
|
}
|
|
|
|
|
|
class AzureADOAuthSourceForm(OAuthSourceForm):
|
|
"""OAuth Source form with pre-determined URL for AzureAD"""
|
|
|
|
class Meta(OAuthSourceForm.Meta):
|
|
|
|
overrides = {
|
|
"provider_type": "azure-ad",
|
|
"request_token_url": "",
|
|
"authorization_url": "https://login.microsoftonline.com/common/oauth2/authorize",
|
|
"access_token_url": "https://login.microsoftonline.com/common/oauth2/token",
|
|
"profile_url": "https://graph.windows.net/myorganization/me?api-version=1.6",
|
|
}
|